Email worm hitting HARD!

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Brujah
    Beer Money Baron
    • Jan 2001
    • 22157

    #1

    Email worm hitting HARD!

    W32/Sober.O is an email worm. This worm is a variant of W32/Sober. The worm will infect Windows systems and spreads through email.

    The infected email carries a spoofed 'From' address picked up randomly from the infected system.
    http://www.pspl.com/virus_info/worms/sobero.htm

    I'm getting this on all of my email accounts, and a lot of bounces making it look like I'm the one that sent them. You may already be seeing the same.
  • Darby
    Confirmed User
    • Oct 2003
    • 358

    #2
    I just got a shitload in the last hour
    custom cam payouts - interested in your cam traffic for sale
    icq 172048099 - darby at 739cams.com

    Comment

    • Spunky
      I need a beer
      • Jun 2002
      • 133978

      #3
      I must have had 100 today..freakin annoying

      Comment

      • Sosa
        In Tushy Land
        • Oct 2002
        • 40149

        #4
        glad my isp blocks that shit before it even hits my mailbox

        Comment

        • ProjectNaked
          Confirmed User
          • Jul 2004
          • 4309

          #5
          I was getting them last week, got so bad I had no choice but to change my email accts -

          Comment

          • austinth
            Confirmed User
            • Jul 2002
            • 1770

            #6
            yep i saw those starting yesterday in the morning some time
            Get A $25 Circuit City GIFT Card - FREE!

            Comment

            • Nismo
              Confirmed User
              • May 2002
              • 4977

              #7
              so that's what that was. i've been getting a ton of them.
              i buy massive xxx dating traffic.

              Comment

              • StuBradley
                Confirmed User
                • Jul 2002
                • 2625

                #8
                I hadn't noticed because I use Spam Arrest. Just checked my unverified emails on their site....holly shit that's alot of emails!

                51-566-514

                Comment

                • Spunky
                  I need a beer
                  • Jun 2002
                  • 133978

                  #9
                  I found that a lot of email was sent from the Phillipines...
                  so I denied incomming emails from this country and I enabled filtering incomming messages for attachments like: bat, pid, exe, zip, rar. Haven't received one today
                  Last edited by Spunky; 05-04-2005, 07:09 PM.

                  Comment

                  • Vox
                    Confirmed User
                    • Mar 2002
                    • 2710

                    #10
                    Why is it that some new virus comes out when my anti virus subscription just expires.
                    Social profile assassination for hire

                    Comment

                    • Luc
                      Confirmed User
                      • Nov 2002
                      • 1130

                      #11
                      bruj, how you gettin hit if you using spamarrest.
                      » Looking for Type-in domais? Page Rank domains? Alexa domains? Popular domains?
                      » Domain Research Tool can scan hundreds of thousands of domains to find whatever you're looking for.
                      » Auto-appraise domains and send automated domain offers in bulk with just one click.
                      » Full support for Proxy Servers and International Overture. Try it Free.

                      Comment

                      • Brujah
                        Beer Money Baron
                        • Jan 2001
                        • 22157

                        #12
                        Originally posted by Luc
                        bruj, how you gettin hit if you using spamarrest.
                        I'm not getting hit with the worm. I'm getting replies from people who think I send them the email because of the From address spoofing it uses. I investigated it a little bit and saw the emails in my spamarrest Unverified.. as they get bounced back.

                        Comment

                        • shermo

                          #13
                          So far so good. I hate these fucking viruses though.

                          Comment

                          • NaughtyRob
                            Two fresh affiliate progs
                            • Nov 2004
                            • 29602

                            #14
                            I am not getting it at all.
                            [email protected]
                            Skype: 17026955414
                            Vacares Web Hosting - Protect Your Ass with Included Daily Backups

                            Comment

                            • VeriSexy
                              Join The Royal Family
                              • Apr 2002
                              • 25463

                              #15
                              Originally posted by Sosa
                              glad my isp blocks that shit before it even hits my mailbox

                              That is what every ISP should be doing..........
                              Looking for a KICK ASS TEEN SPONSOR? Check out ROYAL CASH - THE KING OF TEEN!
                              Incredible webmaster tools FHGs, Morphing Blog and RSS Feeds, Embedded FLV & WMV Videos
                              .
                              With TOP RATIO Sites like


                              ATMovs.com | iTeenVideo.com |
                              TeenSexMovs.com | TeenSexMania.com


                              Comment

                              • BigBen
                                Confirmed User
                                • Nov 2004
                                • 2299

                                #16
                                Check out ClamAV for your mailserver

                                http://www.clamav.net/

                                Comment

                                • WebGemsHosting
                                  Registered User
                                  • Dec 2003
                                  • 98

                                  #17
                                  yeah, been getting them all day in my local ISP mailbox.....
                                  Web Gems Hosting
                                  [email protected]
                                  www.webgemshosting.com
                                  ICQ# 8447977

                                  Quality, Performance, Value

                                  Comment

                                  • dalila
                                    Confirmed User
                                    • Feb 2005
                                    • 573

                                    #18
                                    Read about it yesterday here http://www.pimpcafe.com/article2/art...p?article=3331
                                    but didn't get any infected email yet

                                    Comment

                                    • dalila
                                      Confirmed User
                                      • Feb 2005
                                      • 573

                                      #19
                                      hmm sorry the article seems to be removed already

                                      Comment

                                      • loverboy
                                        When it rains, it pours
                                        • May 2003
                                        • 20609

                                        #20
                                        good thing i get hourly auto updates from Trend Micro

                                        Comment

                                        • MickeyG
                                          Confirmed User
                                          • May 2004
                                          • 4134

                                          #21
                                          I noticed those the other day, I did a manual update with norton and now it catches them. I wish this thing updated more frequently.

                                          Comment

                                          Working...